How to identify these servers ?

John Kerbawy john at MAKINTOSH.COM
Sat Aug 19 06:17:31 UTC 2000


: Our Web server gets continuous hits from two unknown hosts: 64.162.43.232
: and 64.162.43.209.
: 
: How can I identify these servers, 'dig 64.162.43.209' does give useful info.

First, find out who owns the IP's.

----
{john}[NOC:~]% whois -a 64.162.43.209                           
Pacific Bell Internet Services,Inc. (NETBLK-PBI-NET-8) PBI-NET-8
                                               64.160.0.0 - 64.163.255.255
Santa Clara Unified School District
(NETBLK-SBCIS-100718-14615) SBCIS-100718-14615
                                               64.162.40.0 - 64.162.43.255
----

You could then find some more information about a specific record.

----
{john}[NOC:~]% whois -h whois.arin.net NETBLK-SBCIS-100718-14615
Santa Clara Unified School District (NETBLK-SBCIS-100718-14615)
   1889 Lawrence Road
   Santa Clara, CA 95052
   US

   Netname: SBCIS-100718-14615
   Netblock: 64.162.40.0 - 64.162.43.255

   Coordinator:
      PBI IP Administrator  (PIA2-ORG-ARIN)  ip-admin at PBI.NET
      214-495-2098
Fax- 415-442-4999

   Record last updated on 19-Jul-2000.
   Database last updated on 18-Aug-2000 17:55:21 EDT.
----

,---------------------------.  ,-----------------------------------.
\    John F. Kerbawy         \ \ All generalizations are false,     \
 \   john at maKintosh.com       \ \ including this one.                \
  \  816.333.5407 \ john at EFnet \ `-----------------------------------'
   `---------------------------' 




More information about the bind-users mailing list